CVE-2022-26254

5.3 mediumEPSS 0.8%

Medium (5.3) in wowonder wowonder. EPSS 0.8% chance of exploitation in the next 30 days.

WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated attackers to arbitrarily change group ID names.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-639
Published: 2022-03-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wowonder:wowonder

References

https://youtu.be/b665r1ZfCg4
https://youtu.be/b665r1ZfCg4

Check your stack JSON